Saturday 8th March 2025

Good morning! It's finally the weekend, however Today’s news proves that hackers are getting way too creative. From cybercriminals laundering billions through a shady Russian crypto exchange to ransomware gangs using webcams as attack launchpads, it’s clear that no device is too small to be a security risk. Oh, and Japan’s NTT Communications just had to notify 18,000 corporate customers that their data got compromised.

Maybe it’s time to unplug your webcam… or at least update that firmware. ??

NTT Communications Suffers Data Breach, 18,000 Companies Affected

Japan’s NTT Communications just joined the unfortunate list of major telecom providers hit by cyberattacks. The company has confirmed a data breach affecting nearly 18,000 corporate customers, with hackers accessing sensitive contract details, contact information, and service usage data.

The breach, discovered on February 5, targeted NTT’s Order Information Distribution System, but the hackers didn’t stop there. Even after blocking initial access, NTT found that attackers had pivoted to another device on its network by February 15. That device was swiftly cut off, and NTT now says the threat is fully contained.

This isn’t NTT’s first cybersecurity rodeo—just this year, it faced a 12-hour DDoS attack in January, and back in 2020, another breach saw customer data stolen. The company is opting not to notify affected customers individually, instead leaving the public announcement as the only notice. Moral of the story? If you’re doing business with a major telecom provider, assume your data is a hacker’s next target.

U.S. Charges Russian Crypto Exchange Admins for Money Laundering

The U.S. Department of Justice has dropped the hammer on Garantex, a Russian crypto exchange accused of laundering billions for cybercriminals, drug traffickers, and even terrorists. Two key figures—Aleksej Besciokov and Aleksandr Mira Serda—are facing serious charges, with possible sentences of up to 20 years in prison.

Garantex, which processed at least $96 billion in crypto transactions since 2019, has now had its domains seized and $26 million in funds frozen. On top of that, Tether blacklisted its wallets, forcing the exchange to suspend operations.

This crackdown comes after Garantex was first sanctioned in 2022 for links to shady players like the Conti ransomware gang and the Hydra dark web market. Despite losing its license in Estonia, the exchange kept operating through loopholes—until now.

The U.S. is making it clear that crypto exchanges playing fast and loose with illicit funds won’t be able to hide forever.

Akira Ransomware Uses a Webcam to Bypass Security—Seriously

Ransomware gangs are getting creative. The Akira ransomware group just pulled off an attack using a webcam to encrypt a company’s files, after its main ransomware payload was blocked by security software.

Cybersecurity firm S-RM discovered the attack, where Akira hacked into an unsecured webcam running on a Linux-based OS, which lacked Endpoint Detection and Response (EDR) protection. From there, they used it to access network shares and encrypt files remotely—completely bypassing Windows security defenses.

The attackers initially broke in through an exposed remote access tool, deployed AnyDesk, and stole data for a double extortion attack. When their Windows ransomware got blocked, they scanned the network for alternatives and found the vulnerable webcam.

IoT devices like webcams and fingerprint scanners are often overlooked security risks. If they’re connected to sensitive networks, they need regular patching and monitoring—because apparently, even a webcam can help launch a ransomware attack.